Question 1

Which of the following should be done by employees to protect against data breaches?

Accepted Answer

A) They should develop new exploits. 
B) They should remove existing honeypots. 
C) They should design methods for data extrusion. 
D) They should conduct a walkthrough. 
A) They should develop new exploits. 
B) They should remove existing honeypots. 
C) They should design methods for data extrusion. 
D) They should conduct a walkthrough. D

Question 2

Decisions on how to respond to a data breach are most effective if they are made when the breach is happening.

Accepted Answer

A) True 
 B)False  False

Question 3

________ are software or procedures used to prevent an information security attack.

Accepted Answer

A) Malware definitions 
B) Countermeasures 
C) Exploits 
D) Attack vectors 
A) Malware definitions 
B) Countermeasures 
C) Exploits 
D) Attack vectors B

Question 4

Which of the following regulatory laws requires data protection for financial institutions?

Accepted Answer

A) the Family Educational Rights and Privacy Act (FERP
A)  
B) the Federal Information Security Management Act (FISM
A)  
C) the Gramm-Leach-Bliley Act (GLB
A)  
D) the Health Information Portability and Accountability Act (HIPA
A)  
A) the Family Educational Rights and Privacy Act (FERP
A)  
B) the Federal Information Security Management Act (FISM
A)  
C) the Gramm-Leach-Bliley Act (GLB
A)  
D) the Health Information Portability and Accountability Act (HIPA
A)

Question 5

Stolen credit card information is validated through a process called carding.

Accepted Answer

A) True 
 B)False

Question 6

The purpose of a business continuity planning session in an organization is to ________.

Accepted Answer

A) discuss how to return the organization to normal operations as quickly as possible after a data breach 
B) build plans to increase the market presence of the organization and increase its user base 
C) identify new markets that will accelerate the growth of the organization 
D) understand the type of information stored by the organization and implement relevant security measures as required by regulatory laws 
A) discuss how to return the organization to normal operations as quickly as possible after a data breach 
B) build plans to increase the market presence of the organization and increase its user base 
C) identify new markets that will accelerate the growth of the organization 
D) understand the type of information stored by the organization and implement relevant security measures as required by regulatory laws

Question 7

Which of the following is true of the measures to be taken by an organization in the event of a data breach?

Accepted Answer

A) The organization must delay informing its users so that the occurrence of data breach remains private. 
B) The organization must not involve additional technical or law enforcement professional as it may lead to further damage to its data. 
C) The organization must destroy the evidence of the breach to avoid future security problems. 
D) The organization must respond quickly to mitigate the amount of damage hackers can do with the stolen data. 
A) The organization must delay informing its users so that the occurrence of data breach remains private. 
B) The organization must not involve additional technical or law enforcement professional as it may lead to further damage to its data. 
C) The organization must destroy the evidence of the breach to avoid future security problems. 
D) The organization must respond quickly to mitigate the amount of damage hackers can do with the stolen data.

Question 8

It is easier for organizations to prepare a list of countermeasures against many different types of attacks and take appropriate measures accordingly.

Accepted Answer

A) True 
 B)False

Question 9

A group of hackers use a targeted phishing attack to breach a company's firewalls and hack into its security system.Which of the following techniques have the hackers used?

Accepted Answer

A) pretexting 
B) IP spoofing 
C) spear phishing 
D) phone phishing 
A) pretexting 
B) IP spoofing 
C) spear phishing 
D) phone phishing

Question 10

Explain the basic countermeasures to be taken by organizations to protect themselves against data breaches.

Accepted Answer

There is no list of countermeasures for

Question 11

Venclave Hospital is a privately-owned organization that specializes in treating neurological diseases.Which of the following regulatory laws governs the data security measures to be taken by this hospital for protecting against data breach?

Accepted Answer

A) the Health Maintenance Organization Act of 1973 
B) the Health Information Portability and Accountability Act (HIPA
A)  
C) the Gramm-Leach-Bliley Act (GLB
A)  
D) the Federal Information Security Management Act (FISM
A)  
A) the Health Maintenance Organization Act of 1973 
B) the Health Information Portability and Accountability Act (HIPA
A)  
C) the Gramm-Leach-Bliley Act (GLB
A)  
D) the Federal Information Security Management Act (FISM
A)

Question 12

A(n)________ is said to happen when an unauthorized person views,alters,or steals secured data.

Accepted Answer

A) data breach 
B) asynchronous communication 
C) key escrow 
D) sequence flow 
A) data breach 
B) asynchronous communication 
C) key escrow 
D) sequence flow

Question 13

The Federal Information Security Management Act (FISMA)details the procedures to be followed by a federal agency in case an organization fails to ensure the minimum security requirements for its data and systems.

Accepted Answer

A) True 
 B)False

Question 14

________ refers to the process of placing a small charge on a credit card to ensure it is working.

Accepted Answer

A) Hoarding 
B) Carding 
C) Phishing 
D) Credit card hijacking 
A) Hoarding 
B) Carding 
C) Phishing 
D) Credit card hijacking

Question 15

An organization can easily stop a simple SQL injection attack on its online store by additional user training,stronger vendor authentication,or an internal network intrusion detection system.

Accepted Answer

A) True 
 B)False

Question 16

Explain how data breach occurs with an example.

Accepted Answer

Hackers are continually developing new t

Question 17

Data extrusion helps organizations secure their data from possible data breaches.

Accepted Answer

A) True 
 B)False

Question 18

Personally identifiable information includes a person's bank account numbers,personal identification numbers,email address,and social security numbers.

Accepted Answer

A) True 
 B)False

Question 19

List some of the regulatory laws that govern the secure storage of data in certain industries.

Accepted Answer

Organizations need to understand the bod

Question 20

Spear phishing is used by organizations to monitor traffic passing through their internal network.

Accepted Answer

A) True 
 B)False

Exam 26: Data Breaches

Which of the following should be done by employees to protect against data breaches?

Decisions on how to respond to a data breach are most effective if they are made when the breach is happening.

________ are software or procedures used to prevent an information security attack.

Which of the following regulatory laws requires data protection for financial institutions?

Stolen credit card information is validated through a process called carding.

The purpose of a business continuity planning session in an organization is to ________.

Which of the following is true of the measures to be taken by an organization in the event of a data breach?

It is easier for organizations to prepare a list of countermeasures against many different types of attacks and take appropriate measures accordingly.

A group of hackers use a targeted phishing attack to breach a company's firewalls and hack into its security system.Which of the following techniques have the hackers used?

Explain the basic countermeasures to be taken by organizations to protect themselves against data breaches.

Venclave Hospital is a privately-owned organization that specializes in treating neurological diseases.Which of the following regulatory laws governs the data security measures to be taken by this hospital for protecting against data breach?

A(n)________ is said to happen when an unauthorized person views,alters,or steals secured data.

The Federal Information Security Management Act (FISMA)details the procedures to be followed by a federal agency in case an organization fails to ensure the minimum security requirements for its data and systems.

________ refers to the process of placing a small charge on a credit card to ensure it is working.

An organization can easily stop a simple SQL injection attack on its online store by additional user training,stronger vendor authentication,or an internal network intrusion detection system.

Explain how data breach occurs with an example.

Data extrusion helps organizations secure their data from possible data breaches.

Personally identifiable information includes a person's bank account numbers,personal identification numbers,email address,and social security numbers.

List some of the regulatory laws that govern the secure storage of data in certain industries.

Spear phishing is used by organizations to monitor traffic passing through their internal network.

The Importance of MIS

Business Processes, information Systems, and Information

Organizational Strategy, information Systems, and Competitive Advantage

Hardware and Software

Database Processing

The Cloud

Organizations and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Security

Information Systems Management

Information Systems Development

Collaboration Information Systems for Decision Making problem Solving and Project Management

Collaborative Information Systems for Student Projects

Mobile Systems

Introduction to Microsoft Excel 2013

Database Design

Using Microsoft Access 2013

Using Excel and Access Together

Network and Cloud Technology

Enterprise Resource Planning ERP Systems

Supply Chain Management

Enterprise Social Networks and Knowledge Management

Database Marketing

Reporting Systems and OLAP

International Mis

Systems Development Project Management

Agile Development

Business Process Management

Filters